YAML Templates in Azure Pipelines: Reusable and Secure Processes

1# File: start-extends-template.yml
2parameters:
3- name: buildSteps # the name of the parameter is buildSteps
4  type: stepList # data type is StepList
5  default: [] # default value of buildSteps
6stages:
7- stage: secure_buildstage
8  pool:
9    vmImage: windows-latest
10  jobs:
11  - job: secure_buildjob
12    steps:
13    - script: echo This happens before code 
14      displayName: 'Base: Pre-build'
15    - script: echo Building
16      displayName: 'Base: Build'
17
18    - ${{ each step in parameters.buildSteps }}:
19      - ${{ each pair in step }}:
20          ${{ if ne(pair.value, 'CmdLine@2') }}:
21            ${{ pair.key }}: ${{ pair.value }}       
22          ${{ if eq(pair.value, 'CmdLine@2') }}: 
23            # Step is rejected by raising a YAML syntax error: Unexpected value 'CmdLine@2'
24            '${{ pair.value }}': error         
25
26    - script: echo This happens after code
27      displayName: 'Base: Signing'

1# File: azure-pipelines.yml
2trigger:
3- main
4
5extends:
6  template: start-extends-template.yml
7  parameters:
8    buildSteps:  
9      - bash: echo Test #Passes
10        displayName: succeed
11      - bash: echo "Test"
12        displayName: succeed
13      # Step is rejected by raising a YAML syntax error: Unexpected value 'CmdLine@2'
14      - task: CmdLine@2
15        inputs:
16          script: echo "Script Test"
17      # Step is rejected by raising a YAML syntax error: Unexpected value 'CmdLine@2'
18      - script: echo "Script Test"

1# File: templates/insert-npm-steps.yml
2
3steps:
4- script: npm install
5- script: yarn install
6- script: npm run compile